CVS at work: A report on new failures upon some cryptographic protocols

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2052, Issue , 2001, Pages 287-299

  Durante, Antonio ^a   Focardi, Riccardo ^b   Gorrieri, Roberto ^c  

^a SAPIENZA UNIVERSITY OF ROME   (Italy)

^b CA' FOSCARI UNIVERSITY OF VENICE   (Italy)

^c UNIVERSITY OF BOLOGNA   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

AUTHENTICATION; KNOWLEDGE MANAGEMENT; NETWORK ARCHITECTURE; PUBLIC KEY CRYPTOGRAPHY;

ANALYSIS TECHNIQUES; AUTHENTICATION PROTOCOLS; AUTOMATIC TOOLS; CASE-STUDIES; CRYPTOGRAPHIC PROTOCOLS; ENCRYPTED KEY EXCHANGE; MUTUAL AUTHENTICATION PROTOCOLS; NON INTERFERENCE;

NETWORK SECURITY;

EID: 35048902864     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/3-540-45116-1_28     Document Type: Conference Paper

References (27)

1. M. Abadi: Two Facets of Authentication. In: Proceedings of 11th IEEE Computer Security Foundations Workshop. IEEE press. (June 1998) 25-32
2. Abadi, M. and Needham, R.: Prudent Engineering Practice for Cryptographic Protocols. IEEE Transactions on Software Engineering, 22(1) (January 1996)
3. Bellovin, S.M. and Merritt, M.: Encrypted Key Exchange: Password-Based Proto- cols Secure Against Dictionary Attacks. In: Proceedings of 1992 IEEE Computer Society Conference on Research in Security and Privacy. (1992) 72-84
4. John Clark and Jeremy Jacob: A Survay of Authentication Protocols Literature: version 1.0. Available at http://www.cs.york.ac.uk/jac/papers/drareview.ps.gz, (November 1997)
5. Diffie, W., van Oorschot, P.C., and Wiener, M.J.: Authentication and Authenticated Key Exchanges. Design, Codes and Cryptography, 2:107-125 (1992)
6. Donovan, B., Norris, P., and Lowe, G.: “Analizing a Library of Security Protocols Using Casper and FDR". In Proceedings of the FLoC Workshop Formal Methods and Security Protocols, Trento (July 1999)
7. Durante, A.: Uno strumento automatico per la verifica di protocolli crittografici. Master's thesis, Università degli Studi di Bologna (sede Cesena). (luglio 1998)
8. Durante, A.: Analysis of cryptographic protocols: the environment and the application. In: Proceedings of 15th IFIP SEC 2000. (August 2000)
9. Durante, A., Focardi, R., and Gorrieri, R.: CVS: a tools for the analysis of cryp- tographic protocols. In Proceedings of 12th IEEE Computer Security Foundation Workshop, (July 1999) 203-212
10. Durante, A., Focardi, R., and Gorrieri, R.: A Compiler for Analysing Cryptographic Protocols Using Non-Interference. To appear in ACM Transaction on Software Engeneering and Methodology (TOSEM) (2000)
11. Fabrega, F.J.T., Herzog, J.C., and Guttman, J.D.: Honest Ideals on Strand Spaces. In: Proceedings of 11th IEEE Computer Security Foundation Workshop. (June 1998) 66-77
12. Focardi, R. and Gorrieri, R.: A Classification of Security Properties for Process Algebras. Journal of Computer Security, 3(1):5-33 (1995)
13. Focardi, R. and Gorrieri, R.: The Compositional Security Checker: A Tool for the Verification of Information Flow Security Properties. IEEE Transactions on Software Engineering, 23(9):550-571 (September 1997)
14. Focardi, R., Gorrieri, R., and Martinelli, F.: “Non Interference for the Analysis of Cryptographic Protocols". In Proceedings of ICALP' 00. LNCS 1853 (July 2000) 744-755
15. Focardi, R. and Martinelli, F.: A Uniform Approach for the Definition of Security Properties. In: Proceedings of World Congress on Formal Methods in the Development of Computing Systems (FM'99), LNCS 1708. Toulouse (France). Springer- Verlag LNCS. 794-813 (September 1999)
16. Goguen, J.A. and Meseguer, J.: Security Policy and Security Models. In: Pro- ceedings of the 1982 Symposium on Security and Privacy. IEEE Computer Society Press (April 1982) 11-20
17. Gollman, D.: On the Verification of Cryptographic Protocols - A Tale of Two Committees. In: Workshop on secure architectures and information flow. Vol. 32 of ENTCS (2000)
18. International Organization for Standardization. Information technology - Security techniques - Entity authentication mechanism; Part 3: Entity authentication using a public key algorithm. ISO/IEC 9798-3 (1995)
19. Lowe, G.: Breaking and Fixing the Needham-Schroeder Public-key Protocol using FDR. In: Proceedings of Second International Workshop on Tools and Algorithms for the Construction and Analysis of Systems (TACAS'96). Passau (Germany). Springer-Verlag, LNCS 1055. 146-166 (March 1996)
20. Lowe, G.: CASPER: A Compiler for the Analysis of the security protocols. In: Proceedings Tenth IEEE Computer Security Foundation Workshop, (CSFW'97). Rockport Massachusetts (USA). IEEE Press 18-30 (June 1997)
21. Meadows, C.: The NRL Protocol Analyzer: An Overview. Journal of Logic Pro- gramming, 26(2):113-131 (1996)
22. Milner, R.: Communication and Concurrency. Prentice-Hall (1989)
23. Mitchell, J.C., Mitchell, M., and Stern, U.: Automated Analysis of Cryptographic Protocols Using Murø. In: Proceedings of the 1997 IEEE Symposium on Research in Security and Privacy. IEEE Computer Society Press (1997) 141-153
24. Lawrence C. Paulson: The Inductive Approach to Verifying Cryptographic Pro- tocols. In: Proceedings Tenth IEEE Computer Security Foundation Workshop, (CSFW'97), Rockport Massachusetts (USA), IEEE Press. (June 1997)
25. Schneier, B.: Applied Cryptography. John Wiley & Sons, Inc. (1996) second edition
26. SET Secure Electronic Transaction LLC. The SET Standard Specification. Available at the URL, http://www.setco.org/set specifications.html (May 1997)
27. Woo T.Y.C. and Lam, S.S.: Authentication for distributed systems. Computer, 25:10-10 (March 1992)